[asterisk-users] Cisco PIX firewall and nat=yes

[Scott Pinhorne]

Hi

I use a PIX 515 and had a similar problem when I started.
I turned on the fixup for SIP (as well as having nat in sip entry) and 
it seems to do the trick for me.

Good Luck
SP

Bill Gibbs wrote:
> Also the phone can dial out from behind the PIX…but obviously not 
> receive calls.
> 
>  
> 
> Bill
> 
>  
> 
> ------------------------------------------------------------------------
> 
> *From:* asterisk-users-bounces at lists.digium.com 
> [mailto:asterisk-users-bounces at lists.digium.com] *On Behalf Of *Bill Gibbs
> *Sent:* Wednesday, August 23, 2006 11:53 AM
> *To:* Asterisk Users Mailing List - Non-Commercial Discussion
> *Subject:* [asterisk-users] Cisco PIX firewall and nat=yes
> 
>  
> 
> I have a Polycom 501 that works great from behind simple firewalls, like 
> Dlink, etc however behind a Cisco PIX Firewall I see the register 
> messages for the extensions on the Asterisk CLI but when I do a sip show 
> peers I see:
> 
>  
> 
> 702/702                    x.x.x.x     D   N      54297    UNREACHABLE
> 
> 701/701                    x.x.x.x     D   N      54297    UNREACHABLE
> 
> 700/700                    x.x.x.x     D   N      54297    UNREACHABLE
> 
>  
> 
> But I see stuff like
> 
> n       Registered SIP '702' at x.x.x.x port 54297 expires 60
> 
>  
> 
> I have a single phone with multiple extensions in the example above.  As 
> a test I changed that phone to a single extension (700), I see the 
> Registered line but it still says UNREACHABLE.
> 
>  
> 
> I know the Asterisk config is good because every device (soft, hard 
> phone) works and I know the NAT works because I’ve tested that out.
> 
>  
> 
> So…I’m thinking it has something to do with the PIX.  Any ideas?
> 
>  
> 
> Bill
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> --Bandwidth and Colocation provided by Easynews.com --
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users